towards the future of threat and vulnerability management · implemented as part of an it...
Post on 19-Jul-2020
3 Views
Preview:
TRANSCRIPT
April 2020 #ReimagineNewNormal
Towards the Future of
Threat and Vulnerability Management
Businesses are moving towards new possibilities to address system
weaknesses by embracing a modern approach through
Mindtree’s Msecure platform.
2
Businesses face huge data risks and ransomware-type
of attacks with a poor security management program.
1. Introduction
Technology plays an important role in our lives, accelerated by the use of third-party built software
components (3PP). The growing use of such common 3PP components on company assets, particularly
those that process critical business data, introduces additional vulnerabilities and exposures. An example
of these cases are incidents due to the Heartbleed and Shellshock with the famous OpenSSL suite, and the
Bash shell that made millions of Linux systems vulnerable. For large companies with hundreds of products
and services, the problem created by such vulnerabilities represents a risk that could be many orders
higher in magnitude.
To be able to respond in a timely manner and minimize the risks associated, organizations require
advanced vulnerability management capabilities, tools, and more effective processes. Another important
challenge that exists within vulnerability management is timeline orchestration and setting up the priority
between the security teams and the resolver groups.
#ReimagineNewNormal
#ReimagineNewNormal 3
Fortunately, Mindtree’s Cyber Security offerings can help organizations build proactive measures and
compensating controls to maintain their security posture. MSecure–Threat Vulnerability Management
(TVM) Service is one of Mindtree’s cyber-security platforms that proactively tracks the overall system-level
risk in real-time. MSecure–TVM enables enterprises with proactive visibility to identify system risks as well
as direct orchestration of the chain of activities across multiple teams to ensure critical events are
addressed in a timely manner.
MSecure-TVM Service Benefits
>95% visibility on the critical system's security posture
Live Assessment of enterprise level risks
100% tracking of systems and establishing traceability
100% automated compliance tracking
25% lowerOperations
Costs in managing
vulnerabilities
Cost Optimization
Analyst spending
quality time in fixing true positives
Accuracy andQuality
Delivers automatedcompliance
schedules asplanned
ContinousCompliance
Automatedremediation
ContinousImprovement
4
2. About MSecure-TVM Service
Mindtree’s MSecure-TVM Service serves as the backbone in reducing an organization’s system exposure,
hardening the endpoint surface area and increasing organizational resilience. Our service can be
implemented as part of an IT vulnerability management program. It can also seamlessly integrate with
existing processes to uplift response velocity.
Our MSecure-TVM Service helps organizations discover vulnerabilities and misconfigurations in real-time,
based on data feeds, without having the need for agents or repetitive scans. It prioritizes vulnerabilities
based on the threat landscape, sensitivity of information on critical assets, and the business context.
Single portal Assessment
Platform provide the single umbrella to plan the various scan plan
Assess the Infrastructure Application,Code Scan
Leverage Automation and Orchestration capablities
Scale MSecure to any existing remediation process and migrate to a highly automated process
Streamline vulnerability remediation for whole organization
Standardize remediation with one consistent process across the organization
Centralize Vulnerability Remediation
Centralize Vulnerability scan logs from Network, AppSec and VA/PT solutions into one centralized console
Real time dashboards and reports
Provides for a centralized, 360-degree real-time vulnerabilitymanagement dashboards and reports
#ReimagineNewNormal
Connectivity and Availability Security Support and
People PolicyEnabled users with
Endpoint / VDI
3. MSecure-TVM Service Features
The MSecure-TVM Service consists of Mindtree’s feature-rich cyber security platform and our professional
security services to deliver continuous vulnerability reduction, even for the most complex vulnerability
management program.
Work on a vulnerability only once: Vulnerability scans tend to report the same vulnerabilities over and
over again, until such time that they are corrected and closed. If vulnerabilities are not addressed, then
analysts will spend time repetitively analyzing them. MSecure-TVM can track such cases, orchestrate
remediation activities, and close them, thus resulting in savings in analysis as well as reducing the
overall risk score.
Integrated operation with multiple security tools: Most security tools produce standalone results, which
then require additional analyst time to consolidate and correlate multiple result sets to determine the
enterprise system risk. In most organizations, the results are not quantifiable at the enterprise level.
MSecure-TVM can deliver an assessment of overall system exposure and associated risks by correlating
multiple reports, which provides a more accurate exposure vs risk for the enterprise.
Centralized management: MSecure-TVM provides a centralized view and maximized use of data points
to display overall progress, risk exposure, and rate of remediation.
MSecure-TVM Service Features
Single portal Assessment
Platform provide the single umbrella to plan the various scan plan
Assess the Infrastructure Application, Code Scan
Scale MSecure to any existing remediation process and migrate to a highly automated process
Leverage Automation and Orchestration capablities
Work any Vulnerability once
Past attack and case database provides past vulnerability and its case details to security analysts automatically.
Standardize remediation with one consistent process across the organization
Streamline vulnerability remediation for whole organization
Centralize Vulnerability Remediation
Centralize Vulnerability scan logs from Network, AppSec and VA/PT solutions into one centralized console
Infrastructure, Application, Code Scan tool IntegrationCustomer Scan tool integrationCustomer ticketing tool integration
Tool Integration
Eliminate Duplicates
Automatically eliminate recurring vilnerabilites
Provides for a centralized, 360-degree real-time vulnerabilitymanagement dashboards and reports
Real time dashboards and reports
5 #ReimagineNewNormal
MSecure-TVM Service Single Operational Pane of Glass
4. MSecure-TVM Service Extensibility
The MSecure-TVM Service is built on a platform that supports integration with customers’ toolsets to
protect their existing tool investment. Native REST-API extensions provide seamless integration with your
existing security toolset, and your tool capabilities are extended in a secure manner. We have ready API
integrations for many leading security solutions and IT tools.
5. MSecure-TVM Single Operational Pane
The MSecure-TVM service provides a single operational view to execute and manage multiple tasks, and
ensures that management and remediation activities are consistent with your organization’s security policy.
Typical security toolsets MSecure TVM
Infra VA – Nessus or equivalent
Application VA – App spider or
equivalent
Penetration test reports
Ansible or SCCM or equivalent
for patch management
Multiple excel sheets for
tracking the results
Multiple Dashboards for
risk assessment
6 #ReimagineNewNormal
Organizations have been making investments and implementing pointed solutions to address vulnerability
management challenges. Mindtree’s Msecure TVM is modern and it also provides organizations with rewarding results.
About MindtreeMindtree [NSE: MINDTREE] is a global technology consulting and services company, helping enterprises marry scale with agility to achieve competi-tive advantage. “Born digital,” in 1999 and now a Larsen & Toubro Group Company, Mindtree applies its deep domain knowledge to 300+ enterprise client engagements to break down silos, make sense of digital complexity and bring new initiatives to market faster. We enable IT to move at the speed of business, leveraging emerging technologies and the efficiencies of Continuous Delivery to spur business innovation. Operating in 18 countries and over 40 offices across the world, we’re consistently regarded as one of the best places to work, embodied every day by our winning culture made up of over 21,000 entrepreneurial, collaborative and dedicated “Mindtree Minds.”
www.mindtree.com ©Mindtree 2020
6. Conclusion
Brings visibility to attack vectors and
supports in minimizing the attack surface
Accurately determines the vulnerability
that exposes server risks to the enterprise
which require immediate attention
Enable collaborative effort between security
and IT support teams to support identifying
and remediating the true positives
Whether a legacy or modern IT System landscape, MSecure-TVM service can deliver improved remediation velocity to align with your organization’s goals
Msecure TVM service integrates both technical and process layers, providing options to determine whether to eliminate, mitigate, or tolerate vulnerabilities based on risk and cost
top related